Files
odoo_source/odoo/addons/test_read_group/ir.model.access.csv
T
Martin Trigaux 604a47ead8 [IMP] *: remove global ACL
THese are rarely intended for all users but often intended only for
employees.

account:
account.incoterms: only used within internal business models
account.journal.group: same as account.journal, add sudo in computed field

account_edi: need access to accounting objects

base_address_extended:
res.city: only employees should access address data

board: only employees uses this (old) module

crm:
crm.stage: internal users business object

hr_recruitment: employees can read

im_livechat: apply same as for the steps

l10n_ar: used on partner, not only invoices
l10n_ec: accessed only through account.move
l10n_latam: accessed on res.partner

mail:
publisher.warrenty.contract: no data, only static models
mail.channel: group_user has already his own rule
mail.group: group_user has already his own rule
mail.message.subtype: group_user has already his own rule
mail.message.all: remove, already has a portal and employee rule

partner_autocomplete: no interaction with public

project:
project.tags: only needed for project sharing

sale_management:
sale.order.option: same as sale.order

utm: employee already has write access

web_editor: test models that have nothing to do here
web_tour: only employees uses tours

website_sale:
product.ribbon: add sudo for access

base:
ir.default: only employees uses set (could probably be converted to group_system)
ir.ui.view.custom: same as ir.ui.view, add sudo when needed
report.*: portal users don't configure reports
res.users.log: create in sudo, no access needed (adapt test to use another model)
res.lang: still needed for public

closes odoo/odoo#118701

Related: odoo/enterprise#41285
Signed-off-by: Martin Trigaux (mat) <mat@odoo.com>
2023-06-12 22:39:26 +02:00

1.2 KiB

1idnamemodel_id:idgroup_id:idperm_readperm_writeperm_createperm_unlink
2access_test_read_group_on_dateaccess_test_read_group_on_datemodel_test_read_group_on_datebase.group_system1000
3access_test_read_group_aggregate_booleanaccess_test_read_group_aggregate_booleanmodel_test_read_group_aggregate_booleanbase.group_system1000
4access_test_read_group_aggregateaccess_test_read_group_aggregatemodel_test_read_group_aggregatebase.group_system1000
5access_test_read_group_on_selectionaccess_test_read_group_on_selectionmodel_test_read_group_on_selectionbase.group_system1000
6access_test_read_group_fill_temporalaccess_test_read_group_fill_temporalmodel_test_read_group_fill_temporalbase.group_system1000
7access_test_read_group_orderaccess_test_read_group_ordermodel_test_read_group_orderbase.group_system1000
8access_test_read_group_order_lineaccess_test_read_group_order_linemodel_test_read_group_order_linebase.group_system1000
9access_test_read_group_useraccess_test_read_group_usermodel_test_read_group_userbase.group_user1000
10access_test_read_group_taskaccess_test_read_group_taskmodel_test_read_group_taskbase.group_user1000